Falhas do tipo CWE-787

5.843 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em um endereço de memória fora da área alocada para um buffer ou variável. O código não valida o tamanho ou índice antes de gravar, permitindo sobrescrita de dados adjacentes, corrupção de estruturas críticas ou execução de código arbitrário.

Exemplo

Um formulário web que copia dados do usuário para um buffer de 256 bytes sem validar o tamanho da entrada. Se o atacante envia 500 bytes, a escrita transborda e sobrescreve a pilha, podendo hijackear o endereço de retorno da função.

Como mitigar

Use funções seguras de cópia (strncpy, strlcpy ao invés de strcpy; memcpy com tamanho máximo explícito) e sempre valide comprimento e índices antes de escrever. Em linguagens modernas, prefira estruturas com bounds-checking automático (arrays em Java, Rust, etc).

CVE-2024-13166HIGHAn out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote EPSS 2.5%CVE-2017-20149CRITICALThe Mikrotik RouterOS web server allows memory corruption in releases before Stable 6.38.5 and Long-term 6.37.5, aka Chimay-Red. A remote anEPSS 2.5%CVE-2022-44258HIGHTOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter command in the setTracerouteCfg function.EPSS 2.5%CVE-2018-25011—A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16().EPSS 2.5%CVE-2021-31342—The ugeom2d.dll library in all versions of Solid Edge SE2020 before 2020MP14 and all versions of Solid Edge SE2021 before SE2021MP5 lack proEPSS 2.5%CVE-2021-31343—The jutil.dll library in all versions of Solid Edge SE2020 before 2020MP14 and all versions of Solid Edge SE2021 before SE2021MP5 lack propeEPSS 2.5%CVE-2023-20109MEDIUMA vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS Software and Cisco IOS XE Software could allow an EPSS 2.5%KEVCVE-2022-44789HIGHA logical issue in O_getOwnPropertyDescriptor() in Artifex MuJS 1.0.0 through 1.3.x before 1.3.2 allows an attacker to achieve Remote Code EEPSS 2.5%CVE-2022-30664HIGHAdobe Animate SVG File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 2.5%CVE-2020-7558—A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution EPSS 2.5%CVE-2020-7556—A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution EPSS 2.5%CVE-2020-7555—A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution EPSS 2.5%CVE-2023-21606HIGHAdobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 2.5%CVE-2022-28270HIGHAdobe Photoshop SVG File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 2.5%CVE-2022-28276HIGHAdobe Photoshop Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 2.5%CVE-2022-28278HIGHAdobe Photoshop Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 2.5%CVE-2022-28845HIGHAdobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 2.5%CVE-2022-24105HIGHAdobe Photoshop U3D File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 2.5%CVE-2022-28273HIGHAdobe Photoshop Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 2.5%CVE-2022-28839HIGHAdobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 2.5%